Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3735353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a3735353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          whzm66Ojtj/DPZC10XFQxClSVAKQqQeR+TdvQmW9iKc=
Subject key identifier:   59:AC:3F:F8:EB:C6:B2:FD:74:A4:9F:BA:CF:23:88:6D:49:96:EF:05
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       76EC51E541B46AC736773EA9A5DB06EB70B60B59
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3735353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 07:55:01 +0000
ROA not before:           Thu 17 Feb 2022 07:50:01 +0000
ROA not after:            Thu 16 Feb 2023 07:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:755::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ec:51:e5:41:b4:6a:c7:36:77:3e:a9:a5:db:06:eb:70:b6:0b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 07:50:01 2022 GMT
            Not After : Feb 16 07:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:9c:94:fb:2a:48:dd:b1:90:75:3a:3c:8b:
                    e3:41:8b:62:8b:ec:fd:e3:a3:67:13:52:5e:3d:0d:
                    b0:c4:0f:a8:7e:7f:2f:3d:e2:ef:8a:31:71:e1:c4:
                    52:3a:60:cd:2f:f6:34:18:57:e9:2a:1d:77:a9:58:
                    b4:44:d4:53:a0:e5:34:bb:a0:4d:0f:b3:1d:17:08:
                    44:47:c9:79:e8:70:5f:bd:17:73:32:e5:4e:06:d9:
                    5d:71:18:75:a4:25:09:2e:95:4b:97:af:a7:40:f7:
                    f3:f2:c3:a9:bb:97:e6:ef:6e:e7:54:53:1e:d2:15:
                    be:0b:55:9f:3f:bd:a9:a2:36:13:d8:64:e0:25:c8:
                    2b:13:f8:9a:59:e6:39:a8:63:23:40:97:94:c8:70:
                    49:a8:68:d0:1b:4e:76:27:c2:b9:61:45:49:85:81:
                    58:d1:00:68:88:a7:53:dc:db:87:76:21:a6:9f:df:
                    10:f6:09:58:15:0b:53:15:f1:83:b6:1f:05:b2:e7:
                    4c:51:7e:3c:73:c5:5e:eb:e0:bd:7b:4b:fb:1f:8f:
                    2d:77:51:5c:7a:f2:a8:20:2b:b4:92:c5:a5:fd:13:
                    df:8f:e4:a7:ec:46:8b:26:08:03:64:e1:d7:20:88:
                    17:ca:0e:81:06:a3:48:3e:51:e9:8f:8e:65:98:7c:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:3F:F8:EB:C6:B2:FD:74:A4:9F:BA:CF:23:88:6D:49:96:EF:05
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a3735353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:755::/80

    Signature Algorithm: sha256WithRSAEncryption
         d5:2b:29:ab:47:21:c7:3d:8a:8c:2d:8a:21:bc:43:77:9c:16:
         ff:3b:d8:6c:9e:93:7b:4b:f1:7c:c3:2e:5a:60:6a:f4:30:ef:
         d6:ab:96:75:f2:bf:32:b9:99:27:b3:ca:3c:5e:6a:7f:49:1a:
         d8:4d:91:45:35:ee:70:c1:62:69:85:a3:7b:81:0f:d0:6c:f2:
         de:a3:4e:cb:32:47:05:8c:94:2d:3e:a9:cd:cb:8c:61:a0:b9:
         61:b2:14:98:1b:82:59:ab:d5:72:f6:1a:d6:cf:89:e6:bb:ba:
         f9:fd:9a:4b:16:58:db:0a:f4:7c:01:ec:43:1a:ce:2b:5f:d2:
         2a:d2:00:a7:f1:19:bb:6f:9c:c4:11:e5:ac:fa:06:81:7f:7a:
         66:fc:9a:95:31:d5:56:13:8b:a2:82:dc:9e:80:29:ce:54:9b:
         81:8e:63:56:f4:19:da:11:34:3b:72:c5:e2:48:14:50:c0:93:
         62:b9:26:56:d4:99:75:14:19:b9:1c:06:9a:e9:8e:f2:1c:4a:
         6e:a5:e8:17:a7:ad:b8:87:91:cd:75:63:a3:2d:46:b9:1f:9f:
         16:a5:fb:f9:02:c4:1a:0a:66:69:0d:ed:d0:4b:f6:2c:3b:ac:
         1a:3d:e7:36:2c:86:8e:1a:60:c2:5d:31:ad:b6:93:62:3b:8f:
         82:57:58:30
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUduxR5UG0asc2dz6ppdsG63C2C1kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE3MDc1MDAxWhcNMjMwMjE2MDc1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDlFMUU5Qzk0
RkIyQTQ4RERCMTkwNzUzQTNDOEJFMzQxOEI2MjhCRUNGREUzQTM2NzEzNTI1RTNE
MERCMEM0MEZBODdFN0YyRjNERTJFRjhBMzE3MUUxQzQ1MjNBNjBDRDJGRjYzNDE4
NTdFOTJBMUQ3N0E5NThCNDQ0RDQ1M0EwRTUzNEJCQTA0RDBGQjMxRDE3MDg0NDQ3
Qzk3OUU4NzA1RkJEMTc3MzMyRTU0RTA2RDk1RDcxMTg3NUE0MjUwOTJFOTU0Qjk3
QUZBNzQwRjdGM0YyQzNBOUJCOTdFNkVGNkVFNzU0NTMxRUQyMTVCRTBCNTU5RjNG
QkRBOUEyMzYxM0Q4NjRFMDI1QzgyQjEzRjg5QTU5RTYzOUE4NjMyMzQwOTc5NEM4
NzA0OUE4NjhEMDFCNEU3NjI3QzJCOTYxNDU0OTg1ODE1OEQxMDA2ODg4QTc1M0RD
REI4Nzc2MjFBNjlGREYxMEY2MDk1ODE1MEI1MzE1RjE4M0I2MUYwNUIyRTc0QzUx
N0UzQzczQzU1RUVCRTBCRDdCNEJGQjFGOEYyRDc3NTE1QzdBRjJBODIwMkJCNDky
QzVBNUZEMTNERjhGRTRBN0VDNDY4QjI2MDgwMzY0RTFENzIwODgxN0NBMEU4MTA2
QTM0ODNFNTFFOThGOEU2NTk4N0MxMTQxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ4enJT7KkjdsZB1OjyL40GLYovs/eOjZxNSXj0N
sMQPqH5/Lz3i74oxceHEUjpgzS/2NBhX6Sodd6lYtETUU6DlNLugTQ+zHRcIREfJ
eehwX70XczLlTgbZXXEYdaQlCS6VS5evp0D38/LDqbuX5u9u51RTHtIVvgtVnz+9
qaI2E9hk4CXIKxP4mlnmOahjI0CXlMhwSaho0BtOdifCuWFFSYWBWNEAaIinU9zb
h3Yhpp/fEPYJWBULUxXxg7YfBbLnTFF+PHPFXuvgvXtL+x+PLXdRXHryqCArtJLF
pf0T34/kp+xGiyYIA2Th1yCIF8oOgQajSD5R6Y+OZZh8EUECAwEAAaOCApowggKW
MB0GA1UdDgQWBBRZrD/468ay/XSkn7rPI4htSZbvBTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzczYTM3MzUzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIXB1UwDQYJKoZIhvcN
AQELBQADggEBANUrKatHIcc9iowtiiG8Q3ecFv872Gyek3tL8XzDLlpgavQw79ar
lnXyvzK5mSezyjxean9JGthNkUU17nDBYmmFo3uBD9Bs8t6jTssyRwWMlC0+qc3L
jGGguWGyFJgbglmr1XL2GtbPiea7uvn9mksWWNsK9HwB7EMazitf0irSAKfxGbtv
nMQR5az6BoF/emb8mpUx1VYTi6KC3J6AKc5Um4GOY1b0GdoRNDtyxeJIFFDAk2K5
JlbUmXUUGbkcBprpjvIcSm6l6BenrbiHkc11Y6MtRrkfnxal+/kCxBoKZmkN7dBL
9iw7rBo95zYsho4aYMJdMa22k2I7j4JXWDA=
-----END CERTIFICATE-----